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(54) BREAK-IN DETECTING DEVICE AND ILLEGAL BREAK-IN MEASURES MANAGEMENT 
SYSTEM AND BREAK-IN DETECTING METHOD 

(57)Abstract: 

PROBLEM TO BE SOLVED: To provide a break-in 
detecting device which detects illegal break-in by judging 
from packets, and if illegal break-in occurs, takes 
measures to prevent illegal break-in. 
SOLUTION: In a computer network system, the break-in 
detecting device 100 is provided with the following: a 
communication means 110; a packet analyzing means 
120 that determines whether or not the illegal break-in 
is proceeding by analyzing the received packets; a 
measure means 130 that if it is judged that the illegal 
break-in is proceeding, performs closing of protocol 
processing or ports, shutting down of communication 
and the like; an illegal break-in monitoring means 140 
that monitors whether or not the attack of illegal break- 
in and the like is terminated; and a measure removing 
means 150 that if it is judged that the attack of illegal 
break-in and the like is terminated, removes the 
measures of shutting down of communication and the 
like. 
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[0042] o j ». &m?z>mm#- 

40 hS^SffL- (SI 0 0) . f>*7';!f-H3Llf 
g3 2 0^fflu-c, a^-f©SS£*^*ci«:«i: 

,T, 2 5#?rSfflL-CU?cTyi;'ir-^3>tt9 0 0 

[004 3] fgA^SlKS 200H, ^JE«A^^1#® 

2 4 0 tc J: o r HSfe©^ 1 t mWiC . ^iEftA^fto 

nrus^s^^sm-r* (sso) . -euT. «a*^ 

*0KB2 0 0 «, TJE«A^m^l»2 4 0 Jc J: x 
^7Lfci«Lfetl^ (S60tYes), 
^S2 5 0 *fflura{fMW*»I^O (S70), 
50 h©+ffi«rl?g3-r* (S8 0) . Sfc. ^iE{SAi^ 
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7ji^is2 5 i zm^-cfimamsims o j 
feTLtcztzmto-rzLticzK) (S7i)> timaa 

g£S3 O j tt. a3t©#- h##2 5-Cji«*S^-T 
S (SI 10, Sill). 
[0044] fcLk©«fc 5(c, *tfg©/c«Mc:***- h £ 

mmwmw 3 nr icm&m-tjm tw^ ^ * r a 
•y-rs£&^©7 :/ y — > 3 >«ss& set* 

[0 04 5 ] fr*J, ±M<DmVte. 7->#^V<D#-\- 

stR&tfa&=HSA^4j$ig2 o o^t-^c**. >&?v 

fc«A«Bffl«B2 0 0 ttff SifiWttttl,*. «Atfc*0§Sg 
2 0 0©ffciC, &T7V-!r-i/a>&mmi,TI,>Z&- 
h©WI9*fT5WI*«*SW. HA^^2 0 0 

-cb<tt». 04rti. aft*- ha*o^©2 3 i 
i*. Mi?a2 3 0K^h5«^tfc^ am* 

- ha*D^!S2 3 1 «. *tm^fS2 3 0 i«)glHl©«fiS 
B*T*-o-CtJ:l>. RHft<c. *IEgAi&7a*0#Ja2 
5 i »*. mm®%&t2 5 0 £»HB<D*ldE«irc*o-C 

[004 6] W±®«fc^K, 3>e 3 -S*^'7-? 

s/^9>Aic«ii»r. *Jfe©^Si l ©«At£*a£gK:}ra 
(f) 7'a KD^n-Xil^-afcilflffi 

(«) ^>*7';(c^-^>^c*-h<&a^i 

[0047] MfC^ ±IB^iE«A*f«->^7-A«, JHT 
©^&*it*fct1t&*&31£Sg*<f 3.6 . 

(a) i^xma^st^^OTiy^^'JM-y'yLtc^ 

- KD»*i**flrr**K. (b> fv^ytc*-:/ 
>snrc*- h immLxmm&f s^st. < c > «a 

^^#><=>©Jfc3S**7©a*0£§{f U #3fc©*-l- 

raft^s^-rs^e. 

[0 04 8 ] 

tlfeiKi©^} JSLb©<fc^tc, C©f£BJ«, /N'drt.h© 
*> 6 ©#ss £*£*or £ £ <t I »s s*m*s * -5 . 

[0049] ttc. mmmk (.muz. *- nmt 
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ts/cfe. jftmf^Tgfflajc^ss • ^--t^©s«*5s 

mm<Dtc^<o^mm<onm^ < c <t #r a > tr 
h^-^v'^^AC'gsiiffltcK-rsA^ 

[0 05 0] CO»Wtcj:iitf. m^f-Hicm^ 

io [0 0 5 1 3 c ©jfewtctw*. am*ifi»r-rs c t <c 

[0052] ijjss©*fmt L/T, mnmsrzx 

ss&g) (c^>*7';©*-h*a*Db. ST7*';^r- 
~> a >»^>*^ y ©*- b-emm&'ir'? tc&jEH&m 

[00 5 3] C©ffe!JlK:J:fttf, H«»7«. 

can $m<oj&m i ©{SA^D^a©-^!^^^^ 
[02] mmomm i ©ffiAts&n^ottrco-fli* 

[S3] SflKDflHB 2 O^iEflLTJfMMrai^^ f" A© 

±»«BS©-wi%^-ria. 

[04] XlkOJftB 2 oftA«w«S«o-«**r# 

30 j£0„ 

[05] uss©^.® 2 <om mw§£w<D-w*fjk-? m 
asm. 

[06] mm<omm 2 o«A*«ar&a<ottfto-««r . 

[07] ffifeff ®HttM£5%?:|fK&l9. 
[?S-St©iBBJJ] 

1 a<i*g. 50 51 ^^e';. 52 

>»n'^. 53 j (j = l-N) *-h> 1 0 0. 20 0 

gA^^g. 110. 210 mm^m, 120, 

40 2 2 0 ^4r? 1 3 0. 23 0 tt$V£ 

1 4 0. 240 3RE«AJB«#«. 150. 25 

0 M«»R^S. 2 3 1 aft*- ha*D#K. 2 5 

1 ^E«Aif^7a393^©. 30 1-30N, 30j 

( j = 1 ~N) tS$S^SI^g, 3 1 0 JHilfA. 
3 20 f>sl«5yjK-H5Be*K. 
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